Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer
File: k_P8lnjOWwJzU4x4sLlqE-sIYtk.cer (raw, json)
Hash identifier: e2/FjtRy21yGFlqFa/vRy+YVY+j4Y61PrmDhMVrJUlU=
Subject key identifier: 93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8016533F9B19BB7EBADAFA871050BE5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.73.251.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:65:33:f9:b1:9b:b7:eb:ad:af:a8:71:05:0b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93f3fc9678ce5b0273538c78b0b96a13eb0862d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:29:ef:0e:27:86:8c:d0:1b:ac:b9:82:20:
c5:0a:eb:45:50:f9:05:cc:65:96:2e:16:63:6c:9e:
3c:20:16:da:c1:4b:1d:d9:9e:0f:4c:68:49:59:a0:
87:68:17:ca:92:09:00:4e:7a:26:98:46:7c:a2:3b:
14:ba:56:21:a1:64:d4:ae:07:d8:27:77:a9:5e:b5:
4a:d0:6a:7b:8a:bd:c0:0d:5b:4f:9c:be:99:64:b5:
77:35:4e:b6:db:6a:18:e4:77:40:22:3e:d6:91:3a:
ca:57:ff:ae:e4:f9:65:71:0a:35:11:9e:eb:22:8b:
c8:23:2d:11:31:6e:71:5c:e1:1e:c5:24:60:02:7c:
18:2a:0d:7a:ee:0b:f5:95:52:9a:35:af:05:90:29:
44:bb:1f:4c:69:b0:d7:4a:9f:6d:04:ff:70:3c:71:
0a:d8:fd:e9:de:c2:33:8f:58:b4:d1:c0:ea:0a:b8:
d9:9f:66:30:d5:74:f9:53:f1:a2:01:55:12:ed:7e:
6d:7a:d9:91:8d:cc:35:0d:e6:b6:2e:6c:01:fd:a3:
97:5f:86:13:93:1c:c0:ff:12:12:e7:6d:7c:f4:5d:
a4:b8:c6:3d:ed:1f:25:a8:dd:97:cb:b2:54:a1:53:
91:7b:32:7d:01:9a:75:ab:f1:30:d0:8c:00:65:14:
50:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F3:FC:96:78:CE:5B:02:73:53:8C:78:B0:B9:6A:13:EB:08:62:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/cccac7-4660-4e52-951f-ba0d3b2d36e0/1/k_P8lnjOWwJzU4x4sLlqE-sIYtk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.251.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:3d:2e:95:ce:3d:6f:e8:60:b7:9f:a1:f1:92:cd:3f:ce:6a:
ff:33:a9:62:27:ba:b1:06:05:83:a8:56:e4:68:db:9f:28:12:
b0:be:45:ba:cb:a2:64:73:40:a6:e3:2b:b4:b0:5b:99:81:fe:
65:4a:e5:52:f5:d1:4a:93:ce:d7:09:d3:68:31:e6:7a:17:1f:
9a:5b:67:53:12:28:38:49:9b:2f:b2:b0:ef:6f:9d:a9:f9:0a:
13:1f:9a:9f:a4:fa:03:11:a6:d4:a0:d6:72:a0:71:93:62:97:
00:df:51:02:4e:2c:6d:ed:29:ea:99:6e:2e:a1:70:ba:66:e5:
53:af:5d:6b:83:dc:05:0b:b6:df:35:08:32:e9:b8:a4:ea:79:
b4:09:e5:11:14:af:0c:b5:b2:2b:bd:ef:a1:a6:dd:46:fa:a2:
dc:92:08:a3:7f:48:75:43:79:e4:00:93:24:3b:6e:36:03:56:
34:d0:05:61:5a:19:63:7e:4d:85:7d:dc:58:33:92:c2:c7:dd:
6a:ab:f2:63:b0:b8:fb:c9:ac:b5:73:42:d7:c9:60:d7:84:9f:
02:61:96:0c:48:d2:fc:e0:70:1e:cd:aa:3c:d8:d1:16:8e:3b:
c6:be:b9:4d:13:9b:e2:4d:1b:3b:0a:b9:d7:7b:6b:fb:c1:7e:
9b:1a:8a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:14:22 2024 by rpki-client on console-fra.rpki-client.org